For private profiles, hide all profile information from logged-out users
authorAaron Wells <aaronw@catalyst.net.nz>
Tue, 20 Aug 2013 07:02:19 +0000 (19:02 +1200)
committerSon Nguyen <son.nguyen@catalyst.net.nz>
Wed, 2 Oct 2013 17:07:27 +0000 (06:07 +1300)
commitfa6494a7ac8f0880dc856c9ec146e3fde24b60df
tree1cbd2867e7d252b5c47aae70001161bc694751bf
parent79a810210bfdf89a466876fdf8ac54354f73b73b
For private profiles, hide all profile information from logged-out users

Bug1158625: If the user hasn't made their profile public, don't even show their pic and name
to logged-out users.

And in order to prevent enumeration attacks, show the same access denied screen to a
logged-out user, whether they hit the URL for an exising profile or whether they entered
an invalid URL.

Change-Id: Ic926fde3e04a59728868fffecc9272136fb83855
htdocs/user/view.php